cros: Ensure quick unlock is disabled by default for enterprise policy.

components/policy/resources/policy_templates.json

Index: components/policy/resources/policy_templates.json
diff --git a/components/policy/resources/policy_templates.json b/components/policy/resources/policy_templates.json
index 7938dd09e1171600d0bbca831ceafb488c1498f0..c69225dc3894df2b4b3fd7bd70462703c56bc9a7 100644
--- a/components/policy/resources/policy_templates.json
+++ b/components/policy/resources/policy_templates.json
@@ -9267,6 +9267,7 @@
             'per_profile': True,
           },
           'example_value': ['PIN'],
+          'default_for_enterprise_users': [],

[sammiequon, 2017/01/12 20:01:20]

Should this be a boolean value?

[jdufault, 2017/01/12 20:38:47]

Example value is a list? It looks like the C++ code which handles it also
assumes it is a list[1].

1:
https://cs.chromium.org/chromium/src/chrome/browser/chromeos/login/quick_unlo...

[sammiequon, 2017/01/12 20:42:29]

Ah, that's how it works, I just saw all the other instances in this file had a
boolean.

[pastarmovj, 2017/01/23 23:38:12]

Just making sure you understand the implications of this line is that the user
will not be able to enable any of the quick unlock modes if the device is
enrolled. It's not just the initial state but the only state. If this is what
you want you are good. :)

[jdufault, 2017/01/25 01:32:43]

Here's the desired behavior: the user is enterprise enrolled, admin console has
not been updated/no prefs have been pulled. All quick unlock modes are disabled.

For enterprise users, quick unlock needs to be explicitly enabled by the admin.

[pastarmovj, 2017/01/25 15:28:05]

Acknowledged.

           'id': 352,
           'caption': '''Configure allowed quick unlock modes.''',
           'tags': [],